| Privacy
Statement |
Commitment
to privacy
Gymea
Lily Psychotherapy Centre (GLPC) respects your personal details and your
rights to privacy. GLPC is bound by the National Privacy
Principles. This Policy Statement outlines how we gather
personal information and how we maintain, use and protect that
information.
|
What
we collect
In
most circumstances, we only collect personal information if it is
necessary for one or more of our functions or activities. We will
tell you, in most circumstances, why we are collecting your personal
information and how we intend to use it. The type of personal
information we are likely to collect is your contact details. We may
also keep clinical records of our contact with you. Sometimes we
give questionnaires and are asked to write letters and reports. Letters
and reports are only written with your consent.
|
How
we use personal information
We use
your personal details so that we can contact you. If we need to
disclose your personal information to another party we require you to sign
an Information
Consent Release Form. (Click hyperlink then print)
|
Security
access and complaints
We
regard the security of your personal information as a priority and have in
place a number of physical and electronic measures to protect it.
The internet is not a secure environment and although all reasonable steps
are taken to protect your security, we cannot guarantee the security of
information you provide to us via our web site. We
do not use 'cookies' on our web site. No personal data is stored on
our web site. We do not collect 'clickstream' data. In most
circumstances you have the right to access any personal information we
collect and hold about you and to have it corrected if it is wrong.
Please contact your therapist at the centre (contact details at the end of
this statement) if you wish to access or update your personal information,
or if you have a complaint about how we have handled your details.
|
Exemptions
we rely on
To the
extent that it applies, GLPC intends to rely on the employer exemption relating
to employee records. We have adopted a number of measures
designed to protect the privacy of our employees. We
may also be entitled to rely upon the exemption for disclosing personal
information.
|
Contact
If you
have any questions about GLPC's privacy policy or any of the
practices outlined in this policy, please contact
us.
|
| Key
privacy issues for psychologists to consider (from Inpsych,
Dec 2001) |
The
following key issues will give you an idea of how the Privacy Act affects
the work of psychologists in private practice.
|
A
client states: 'I think you got my diagnosis wrong, I want to change my
file.'
A client believing that the diagnosis provided by a psychologist to be
wrong is NOT sufficient reason to record a change to his or her
file. The National Privacy Principle (NPP) 6.5 requires the
individual to establish that the information is not accurate, complete and
up-to-date. However, if there is disagreement between the
psychologist and the client about the accuracy of the information held,
NPP 6.6 states that if the client asks the psychologist to associate with
the information a statement claiming that the information is not
accurate, complete or up-to-date, the psychologist must take steps to do
so.
|
A
client (or potential client) asks: 'What is your policy on the management
of your clients' personal information?'
Each organisation or psychologist in private practice, must prepare a
concise statement which indicates their policy on management of the
clients' personal information. See our Privacy
Statement.
|
A
parent of a young client states: 'I would like to see my 15 year-old
daughter's file, because I believe it is now available to me under the
Privacy Act.'
Not necessarily. NPP 6 (Access & Correction) applies only to
individuals accessing (or correcting) information about themselves.
Under NPP 2.4 a psychologist may disclose health information about a
client to the client's parents if:
a) the client is incapable of giving consent, OR cannot communicate
consent, AND
b) i. the psychologist is satisfied that disclosure is necessary to
provide appropriate care of treatment of the client, or
ii. the disclosure is made for compassionate reasons
AND
c) the disclosure is not to any wish
i. expressed by the client before the client became
able to communicate concern AND
ii. of which the psychologist is aware, AND
d) The disclosure is limited to the extent reasonable and necessary for a
purpose mentioned in b).
So, although the parent may want to see the file, they do not have an
absolute right to see it.
|
A
client says to you: 'Centrelink paid for your report about me, but I
would like a copy for my records.'
Clients will be entitled to a copy of personal information held about
them, even if it is initially paid for by another party.
|
You
receive a call from the police who want information about one of
your clients. They inform you that under NPP 2.1 h, you should tell
them.
NPP 2.1 h in part refers to disclosure of information for the prevention,
detection, prosecution or punishment of criminal offences. However,
there is a crucial footnote to NPP 2.1 h, Note 2, which states:
"Sub clause 2.1 does not override any existing legal obligations not to
disclose personal information. Nothing in sub clause 2.1 requires an
organisation to disclose personal information: an organisation is always
entitled not to disclose personal information in the absence of a legal
obligation to disclose it."
So, in this case, unless there was an overriding legal obligation to
disclose (see B6 of the APS Code of Ethics), the police would
require a search warrant to obtain the information.
|
An
ex-client who came to you for couples therapy says she wants a copy of the
notes you made.
Where providing access to information would have an unreasonable impact
upon the privacy of other individuals, the psychologist may refuse access
(NPP 6.1c). Hence the psychologist may release information the
pertains solely to the ex-client making the request, but may withhold
information about the other party in the "couples
therapy". However, the OFPC would expect that psychologists
find out whether the third party affected would consent to the release of
this information, and explore possible options to meet the request of the
client.
|
A
client from three years ago demands that you destroy her file. She
believes the information you hold is stopping her from gaining
employment.
The principle on Data Security, NPP 4.2, states that a psychologist must
take reasonable steps to destroy or permanently de-identify personal
information if it is no longer needed for any purpose which the
information may be used or disclosed under NPP 2. However, the APS
Code of Ethics requires that records be kept (in relation to adult
clients) for a minimum of five years unless legal requirements specify
otherwise (note that the period of time for which psychologists must keep
client records is under review and may increase to a minimum of seven
years for adult clients). This requirement would probably counter
the possibility that it is no longer needed.
|
What
happens if the family of a client who has died wants to see the file?
The Privacy Act applies to a "natural person" and makes no
reference to a deceased person. As NPP 6 would not apply to the
deceased person and
the psychologist has no obligation to disclose the deceased client's file
to the family members .
|